[dns-operations] It's begun...

[Matthäus Wander]

* Peter Andreev [2013-11-05 16:26]:
> 
> 2013/10/31 Chris Thompson <cet1 at cam.ac.uk <mailto:cet1 at cam.ac.uk>>
> 
>     On Oct 24 2013, I wrote:
> 
>     [...]
> 
>         But... the two Cyrillic gTLDs (xn--80asehdb & xn--80aswg) are a bit
> 
>         broken, in that NXDOMAIN responses don't validate properly.
> 
> 
>     and there were some followups.
> 
>     Just to note that this has been fixed by now - the right NSEC3 records
>     and their signatures are being returned.
> 
> 
> We met very similar symptoms when we were signing our zones.  BIND
> simply didn't generate NSEC3 unless restarted.

The operator of xn--80asehdb. and xn--80aswg. is using a custom-made
name server according to their version.bind.

Regards,
Matt

-- 
Universität Duisburg-Essen
Verteilte Systeme
Bismarckstr. 90 / BC 316
47057 Duisburg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5156 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20131105/831325d4/attachment.bin>